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(57)Abstract: 

PROBLEM TO BE SOLVED: To provide an IC card the 
illegal use of which can be prevented by using only a 
reception apparatus of a particular model for target. 
SOLUTION: The IC card applied to the reception 
apparatus for receiving scrambled broadcast programs, 
is provided with: a communication means (270) that 
makes communication with the reception apparatus and 
a transmission control means (265) that particularizes a 
type of a device key possessed by the reception 
apparatus and transmits a session key encrypted by the 
device key and a scramble key encrypted by the session 
key to the reception apparatus so long as it is cleared 
that the reception apparatus is not the particular model 
on the basis of the particularization. 
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[«*«2] I c*-h\ Rtfcoi ca-KftStttf 
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fas 1 am^mc £ 5 awfc* nrca^a t * 9 nut 
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tu tasflgs t iM-r § a«?a t , 
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a^ac * d x?yy7>m*mmt?%wi2(D$m^ 
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«sofA^xiciats £ tmmhTct^xh 
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at$©x * 5 yjfr*mm% x * vyfmmm 
§i§2<Dafi^a^ «^»£«-f5*#ti£fiSt#g 
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RMf f S C fcSCpJK Lfc i: MfEU 2 ©ilfi^gfc J; 

sis^*nfca#ao3Sfl*s±-r«3i®!ipj»?a 

[0007] (2) L©igB^ Bg^tsnfc»§« 
(=-b«ys/ 3 ym) *9.mtfr%TcibtDT/Km*m 

10 nfcX^>7;l/g|£§flU tfftarVWxacj;DS§ 

lommtztikxtyyfmmmtu mfctn 
rcz^y7mfc£VMm.<D7,tyy7?vmm 
&%mw\m%znz, i ca-KTfs^T. mim 

txjtmk i. mmmmttzm 1 © 
vs^mt. m^mic±<o ztyy-fmz^ittz 

20 c o^Mt s-3t laiESMSiitEtt? nfcr a 

^ XH^3t£©tVU X® CSS L &^ C £ tffflU L fc 
[0 0 0 8] (3) £©fffl0tt3M3fBfflg££&, 1 

m^itiEnrcmmRm^itzwcxtyy^mz 
40 mu ^mm^nfcT^um^^mmttMc 

{b^tifcx ^ 7 ^y/m%«#f b u e: ©a^fb^n/c 
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Si 7tTSfit0«L7>rt 1 8frf>»2£f3. E 

kuwst §n%7-^iiKwtif^„ -^ fi^one io 

J6t€ffiT§7-^HKw^tffigiJ'[ffS («TEM 
M) fcEMMSySWg^fcan 6£T£iSU 

asi 7tTK^fi^t^aL7>T7-i sfrsflfias-r 

ttl CA-F2 6<DKm i 2 6 3EIEH2nT^ 
307$ ►) , I C A- FSiSBf fe L < l±fgfT8Sfc«£& 
Snsflfffl^feSo 20 

[0012] K^iicr^rti 8^&sss3isnaa 

agfitts fg&33b>LTs §ffi«2<D7yrt2 ITS 

ffc£ftfcEMM*#lta52 3ET1bW3 0 ^H^n/c 
EMMU, §ma2<oa#S|5 3 3^LT. ICA-F 
2 6F*3©aMgP2 7 0E£ffi3ft£ o ffl«gi$2 7 
ffl*tlfeEMMtt» I C*-F26rt®EMM8Pt»2 

6 2Ej85n3„ EMM«#&2 6 2f±, kmi^t'J 

2 6 3EKttSftTl>5VX*--8km i ^fflV^T^ 
{t£ftfcEMM*ffl^U EMM^*y 2 6 4ElE*r 30 
§ 0 «^SftfcEMMfc3£ft«7-**KwS, E 
CMWW2 6 lKftttSn*. -7?, Sf8H2tt, ft 

ass i *»53i6nT< sm^fb^nfeE CMMMKB2 

3 EXISTS,, iNKtlfcECMS, §ffil$2©SfI 
g|53 3^j>LT, IC*-F2 6flOjHi»2 7 0KSI 
<!2ft5o SUSP 2 7 OT-Sffl^n/cE CMtt, I CA 
-F2 6l*I©ECM&#gP2 6 lE3S5n*o ECMfl 
^gP2 6 1 tt, 7-#«Kw*ffl^Tflg^fr£ttfcE C 
M*8Pf U E CNMtU 2 6 8fc-BM9fcE1W"5 0 
II«W5¥lJ^gP2 6 5 ECM&tfEMM£ffi/lLT 40 

fc, * 2 7 ^7>gt K s *^Sf?SS©HIH?IEBr? 
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iO, I CA-F2 6tSMl2©-r>^-7x-7.± 

©x * 7 yJM&x& Lft^at Et 5 d j: 

r'Vfxa^ty 2 6 7tlSffl?nTV^1ii5©f ; /U 
XttD35, J*ftOSia2t««|*nTV'>*r/W^ 

n^ur^uxgt^ SBi^gP2 6 9tA^$n§„ 

Set, ECM**'J 2 6 8£«Jfi£ftfcECMK:S3: 
n§X^vV7*;W, IPf^gf52 6 9EA*2n5 0 

ttfc*§SP2 6 9fc!u r^>fX||tJ;5X^7>^/Mi% 

7 0^LTfiS2ia*^n§ o mm 
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fr5#*&£n3T>VX»EJ:!>. Pf^{t:£tifc7.^7 

yym^mh. m^ntc^yyfm^x^ 
snfcT; * 7 yfivm. & <o seas©* * 7 y^sflwit 

[0 0 14] I CA-F2 6TB, "W-fca- (W 

tppv) iiPftfnssficrtcwAx #«A*BfcT? 

AZVlibrcM&Ktt, I C A- F 2 6 fiSK'W-e 

mmm % 1 cA-Fft©*uffifg^y 2 e 6E 
gBttrrstttt, T^yy^mwvm^^i. 

9tt5. C©ffiJ81»ffi(±, WM (t7*A2 8Rtf 
tfil 3) ^iiUTJSfiMllClHliRStU Mffi^H 

H#SSa5l 2£/TLTfflIi#1ifg^y 1 ltfflft? 

[00 1 5] H2~H8tt, mimmhrd&mm 

SUBSETS fc*fr©Bf»5. 
[0 0 16] H2E^f«J:5K:v WSSSj^fl^aSSa 
lEA?3£tU »#^S^Lfc (S^aP2 2ETSS 

ufo %mmmmmm <o fflmvmsnc afx ^ 7 

y77 2 7ETTX^7>7;MSn/-dS, MPEG 
xn-^2 9©Sra*STSM«2^BHJ*^n5. C 
©^O^TffiagSBA^S^^OliJBfS I C*-F 

TV-»SECM£#*»2 3ET#*U I CA-F2 6 
^Atl Lfci I C A - F 2 6 mm E C M^€ffl LT 

[0 0 17] m^tf^^j: I C*-F2 6*ffilRrL 

>^;l/f5fe«)OX*7y^;UKsa*, ICA-F2 
ertCrVUXli^ty 2 6 7£TE*tTl"»Sr/W 
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aaiccwfiUfcLfcgL s^«2'\4i« 0 ftjs, ic 

A- F 2 6 rtTJOflWftflBIB I C *- F 2 6 F<3©0* 
L % v^v-f * o 7n -t -7 -9- |c T V 7 h fflaTfr 5 C 1 1 
WtgT*n(i\ I CA-K2 6rttBg^fcfflaMO$ffl 

[0 0 1 8] r/W^atTB|^t:*tlfeX^7 
>^>MiK's*S«Jfc3MMl2T?li, I C*-F2 6£ 

[0 0 1 9] l3Lh©§2H§7H CA-K2 6&, I CA- 

F2 ejJWfxsnsnrfiHtofes-r^Tcstaior^ 

atstgas to^-r 5. 00*1*0 2 -ea^spif 8 mm 

mst?**,, fWfxn^'j 2 6 7 ictt, ±ffi?8m 
mv>T> u xmzmm l r *$ t>, 01 * i$%mm 2 

'(Z.WKN= 3 OS#lT<fena\ I C *- F 2 6 ttr 

[0020] ^t^fis^atD^tovrsiW'rso 

SM 1 0!*{f*a£ffla©rVU*iWW}iJc:i: 

CM*S#U/"cI C*-F2 6fi3KS^^y268 
KTEHU L»I^^nTl^T/U7iI?[JO 

flfN-5. u C -^&SfS$!©rV V X«iSiJ©£5S 
£ECM££Sf3efci:Lfc©{i, ECMiifffil 
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€»1 I C*-F2 6tiB|^afi^L^V\ 

I C*-F2 6aBf^fkL/cX^7>7;HK s 

V^Ux«rVWXWiJ= 1 OSffllcD^D^Lfct L 
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■V t "fr X 7 5 ^^;l/tt^Rlfi6?a&5c 
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[0 0 2 2]&fc, I CA-K2 6*<S#tt20T^ 
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Wi 2\ SKO nr§*!RI£ U fc^©«l§£tt*S* 20 - F 2 6 B, E C M * * U 2 6 8 K C ft Bflf 

t*fe»©1lB8T*«o fijUttlfcECMtt* ECM£ S„ I C*-F2 6»^&i:^2ttTV^&r/V*8l 

jSfcB6H§fta5l 5©*©Hf^{bg|3l 5 bfcTHf^fc£ft ■9l07 9 /V^»fe#r«3WHIlC»L^yfe-3;o» 

So HWftStifcE CMtt, ^fifflSgP 1 7 KXtltil Wtftttttt. 

§ 0 ft*, BWffcSl 5 btt, [0 0 3 4] 0 5 mV&T'W *Wm= 3 ©5MMI 

]^J*Lfd^fcJ&^3tn£4*5n3sWf*fiTfc Xt§»&E CM^'J 2 6 8tfE'ilLTfc^ E CM 

9. EMMfc*:>T«M»20IC*-F2 6fc5a. ^'J 2 6 8 EEttl/t^S* yfe-S>«H»«MM 

tb<tt5M»2i:HlCJE«sn*Blc : 35»i C [0 0 3 5] ^v*-^o#^03B»«S»tfe3lffl«2 

[0029] im&gm 1 2 «, mm&m* * u 1 -fc-^*^«-r s D c ©r-* «, «*ay >y -fe-s; 

RSHl-r. EMM^fcB&^bS 1 6©*©EMM£5g *-5?flH8*H«gL< B^ffi^©gg|gR 3 1 1± 

33 1 6 a B, fflKtSaS 1 2 K J; D K»tflSftfc1& ffi D T VHffiH* <T 5 feft ©HftM^tSSlU, £Sffi3 

f@^©s<iS2©i c*-F2 6c»LT, ffi ^3 2 cj: D^->x^y-^^i-§rc*©^affia^ 

K^fFRlt§feL<^±^§/c&©^1tS^tfE fe^n^o a*. CC-fftt-fllkLT+lr^^^HiB 

MM^^-T§o EMM4figt^tgi5l 6©"t£DHg*t C^^^U-yS^fSffilSiaSLfe^ §^H# 

{b§p 1 6 btt, 4js*nteEMM*Bi#{k-rs 0 »^<k T-^rt x < , ,t>^> h tfts©aaiis^s«a 

ftfiP16btt, VX^-|Rm i KTflWfldMl^ff 40 tV^J^T'^i>o CWC«J:5ffl^©SM«|CJtLT ^ 

5o COVX^r-ilKm i tt, # I C*~F2 6iC@# a^{E"fJ > rWI&t%fflBif&J tzEWzZtv^- 

©SltffeS. C©^X^-HKm i B I CA-Fm S?«BnL, Bfft#fctt5U&«Ci:tf-et5 0 J-X±SJ 

nwfc i c *- f 2 6 t»ta*n, staii!iT*saL mtrc^ y ■fe-s?©esciiLTtt. «n^tf r^?;va 

[0 0 3 0] ±EH4C*«Jfi3SJBli:Ba2XttH3l«: [0 0 3 6] 16%#IU, 05E^-r§fll 

^tS#B2 t*fi»^t>*Tfiffll*-eX3Smi«*n 2 (C>ItLrV^xa^iJ©SS^1-'lffg^aLftA^ 

ia©s«a^fgsb, ^ffi^^s«T§^asfai i ©w«*/WH-efe§c a 6 e^-tssmi i ©» 

*s»w-*c tmzz,, #m&. m 1 fc^wrass 1 tiicTSSo fiu a 

[00 3 1] 0 5 ««BLT, 0 1 TiJILfcK 50 6«C^T <t 5 C©ilflS 1 ttt, ^ y-fc-f 4jjE» 
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[0037] H6t^'r«t5ic, xtsmmtx^yyy 
51 4iat)7^7>7wnfA &nsm%u 7t 

A*2ft§ 0 ECM^fc^bffil 5©(f"0ECM4 
#ffl©$«*frl;:H<r31i$gfca, 3M2t;:ffiA 

2ti§ i c a- f 2 6 izTmmmwnfcZfio ftm 
mm &mf, w&ftMBf&mm. #«©!& 

f5fe«>Ofl!STf«S 0 £jjc?ftfcECMfci\ ECM£ 
Bgtlf^ftgPl 5©tfcDBf^tg|5l 5 bCTBt^fh^tl 

§o ff^fk^nfcECMtt, ^s#uian 7tA*sti 

5o EMM£«fct>T£gM«2©I C*-F2 6lc4* 
&n§ 0 433, 7-*»KwttI C#-F2 6^iB^f 
5, tL<tt5MM2f:HllcJBi5*n«IB£WI C 

[oo3 8] ffiestaspi 2«, Mfetitfs^y i 

K»af. EMM4rtk«M|ft»l 6©*©EMM£$ 
3P1 6 a a, »;#M[5l 2K«K5^*W?nfc19S 
fcfl&#\ fl^OSM«2 0I CA-F2 6t»LT, 81 
•MFrTTS fe t < «Sifc^5ft»«D|?»1Sfi*^& E 
MM^4^f§o EMM^fcHg^bg&l 6©*©Bg^ 

ftasi 6 b a, 4«*nfeEMM*BiF^fk-rso ra#ft 
sn^EMMtt^sayigpi 7KA*?n§„ asm^ 

ftiSl 6 bB, ?W-iKm i fcTBg^fbSffiSfcff 
5o cff)?X?^lKm 114, §1 C*-F2 6t@# 
©8T*S„ C(?)?7?-lKm i {* I C*-FS!JS, 
WmiC I C A-F2 6fc*tiiSn, ai»j^sb 

[0 0 3 9] £P.£*'vfe-5?£j£SBl 9tt, *>y-fe- 

ass 1 7 fcx^t^o 

[0040] c<Dm6ic*tmmi tm5izm%e 

[0 0 4 1] M3S©09T?S, ^ft5MWt»UT, m 
t> L< a* y -b-S^S^S-fra c ^^MiAlSL 

fc. *fc, H7st;Ei8^# J ibT, m^as©^ 
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J 0 0 4 2 ] H 7 fc^ ittMIIJi 1 ©S#IB/Stt, H6fc 
E CMMP 1 5 a ©A2j£ LT> ^ y-b-v^©^ 

-ooflHSi^iftjsnSo msm i ©an t lt»*& 

Sffl«t ft LT. ( 1 ) Hg^l^^*ifc U * 6 1 ;* 7 

■t-^*a^**5Stji£-rs^ (2) at^afi 

10 (H2. H3. H4?MLf^]EK±ffiat|^i) , 
(3) Bf^fflf|^g±^ *yfc~S*fcg*S#5« 
tft£f §tf £ (15, H 6 tlPJ! Lfe*IEI8ifc8BI 

mm) , (4) ng4§s#&*t±-&-*\ ^y-b-^ts* 

[0 0 4 3] 08a. H7ti?r3msiA»53JM*n 

%mmm%m%%m 2 stf 1 c f 2 6 ©-#s 
f 2 6 ©g*n«fcL a 5 t^-rs#a 2 at; 1 c 

F2 6i:Hi;-e**o H4£©a, H8t*TlC*- 
20 F2 6a, ECM^tU 2 6 8rtt^gaflr««lL»W 

-■3©iiMi«Eitr«^T?S5So cne.-o©iisa, 

ECM©-gB£LTI C*-F2 6tAA*nS. 

[0 0 4 4] M*tf % H8©WT?tt, E CM^tU 2 6 

/W»j= 3 ©SfflatWLT^ 7-lr->> - #^= 3 

30 t), I C*-F2 6tt3M»2e»bT, CttBflM* 
^#T?»o cn5flNB*SMtfeS#«2{±, ^^-tr- 

^*jaras 3 2 1 t t v^mc^mt «. 

[0 0 4 5] d©08©fjm ^Vfe-5^ft^=W 

o, Bf^a«^±=«LTfe!9, assiSftwssM 

[0046]C©J;5fc, & ^ -b-^mtt 

[0 0 4 7]^iC s 09-01 1 t^T7D-^ + -F 

so [0048] in 9 a, ¥fi&mosmmv*?-?y 



(10) 
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HcLT, IC*-KfcO«9»l«l±-r*^iEI»± 
[0049] i *fc T/^xaiKSJofiS*^- 

IfBgfcStfE CMfc^jSLUHtftTS (ST 1 1) „ « 

^fb^nfc e c Mtt, t vfl^c^M brains 
(sti 2) . sffl«2t±, isaaii^6©js^»*s 
«f« (st 1 3) o mtrcmmfr^mtiEftrc 

(STI 4) o #*£ftfcECMtt, 
§{IH 2 ©ilflgG 3 3 fttf I C *- F 2 6 ©iHES 2 7 
O^LT, I C*-HCffitt?n* (ST 1 5) „ I 10 
Cfc-KJi, Bf^frSftfcECM&areffcU r;WX 
MljOS^^'Iffg^ii) (ST 1 6) „ cot 

IC*-K©?UlRlS¥iJ£{B2 6 5li, T^WXi 
IS!l©&£**f tiHH* I C A- Krtfcfattf 3 i: i: fe 

£©fi5£*t1fNfifcg-3t, £ffl«fciBtt2ttfc 

*c**iiBf-f « (s t i 7) o mmmm^2 &5izx 
] o, ^mm^m.znt^A^7Mt\ h©r 

/VXMtRSLft^fcflKShSi: (ST l 8, N 
0), I C*-KttS€«i:®M*fTV\ IC*-K;&» 20 

>^m*aMrf « (sti 9) , wm&vmi 6 
h<DTJummm?>tmi<ti&t cstis, 

YES). I CA-Ftt£#«i:©a#£il±-f3 (S 
T20)oOlD, I C*-Kfr5£#afc#LTr^ 

[0 0 5 0] 110(i, f$S«ffl<DSMa/£tt*^-y 

MSo^y-b-: ^O^^^fS^EB 30 

[0051] warn i r/^^aassijo^s^-r 
fumm* v ^-vmm^ts e c m*&s tn^ft 

(ST 3 1) a WUfcSnfcECMtfc TVflMfE 

^«LT®s^ns (s t 3 2) 0 §{iH2«. mm 
\i?e>omkm$m% (st3 3) „ gfiLfcssi 

SfrSHg-tffcSnfcE CMttlt^ (S T 3 4) 0 # 
K£ftfcECM«\ §#1i2©afiS$3 3RtfI c#- 
F2 6©afi^2 7 0£^LT, I C;*J-Ffdl«£ft 
5(ST35). I CA-Ktt* BS^ft^nfeECM* 40 

wtftu T^-rxa»sijoss%^rrisifi^5 (s 

T 3 6) o c©£** I C*-K©S*Hra?M£S2 6 

fflfccEttsnfer'Vxaff, f©t>w* 
fttKatsfrga^JK-rs (st 3 7) o w&m 

(ST 3 8, YES), IC*-Ktt5MMIt»LT, 
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#^*SI€-rS (ST 4 0) . t©;rf<y *-$?©##© 

mmmrcgmmits c©* -yfe-^os^Kftjst 

*m?% (S T 4 1 ) o IIIgnRMI$2 6 5t «fc 

/tfX«fcKSbftv>4:fl>f*n*i: (ST 3 8, N 
0) , I C*-Kfr&S©»t»LT, *».yfe-5?©# 
^ii^ffl^n^ (ST 3 9) o 

[0 0 5 2] 0 1 1 «f£affl®3#«7£tf**-y 
y h £ bT, I C F t ©ff^l^IBRS^Itit b 
fe»K SK6M£©>^-^S^^fcDt§^ 
EKihffl£IW£7n-^-FT*&§ 0 

[0 0 5 3] tSSm 1 tf, r/V xaMBOOMS*^ 

m ^>yfe— 7©s^. Bf^aii^«±-r§^§A^ 

i&fflJT5lg 1 ©*JWfe3i, -yfe-i?*g^t5fr 

s^siBifflrras 2 <mmm^sts e c m^^lbi 

#fWS (ST 5 1) o Bg-^ftStlfcECMtt, TVfl 

mcmLzmmzm (ST52) 0 sm«2h\ a 

£J§ 1 *^©ft£)lM«Tr?> (S T 5 3) „ mhtc 

mmm^m\t^tz e c M%$mt& c s t 5 

4) o iMIShfcECMB, Sfffli2©l«g|33 3Stf 
I C*-H2 6 CDil«g|3 2 7 Ofctf-LT, I C*-F£ 

i«$ns (s t 5 5) 0 1 c*-Ftts i&^ffcsnfc 

E CMWtfcU r/W^MHUOfiS*j5W««* 

(st 5 6) . coti i cft-wm^m 
&z 65a, x>u;«&j©i£s^^t#^ 1 c 

r/W^«CBESt«*S*«!»fr* (S T 5 7) . 
»r§fij£g&2 6 5tcj: SfllKK'l^nfcxV^ 

?n&£ (ST5 8, NO), IC*-Kli«fl»f:a 
®*ffv\ I C*-Kfr53M«fcaLTr>V*«fc 
j;Daf^f^n/cx^7>7;HI^I1-§ (sts 
9) o »oISMR2 6 5t«kD. SM»CE1i$n 

mmnz t (stss, y e s ) , m i ©mwihwc 
stJt i cA-Ft©ti^a#^a^WKS±$nfc 

D , ^ 2 ©SJfltitfcfcS^f 88?«KJ^©* y 

^asstifetj-rs (st 6 0) o mmcwot, % 
i ©WMffiic i Dif^jUg^Sih^nrv-'ntf i c a 
-Fi:S€li:©Pa©Hi^a€tt«ih?n§ 0 $ l ©$|J 

aitstcj; osiitsnT^sitntf i c*-Ftsffli 
k ©mrto* *»^a#<wf t>n« 0 % 2 ©«if?iiftg 
t i dbt^©^ y -fe-^©ss!S^snT^ntf i c 

§c £ 2 ©$S»fi8B£ «fc OBfi&D* -y-b-^©*^^ 
SSh-tV&tffttf I C A-Ffre,g€SC»LT#t 

[0 0 5 4] Z<D%W<D%S2<D%8mMlC-O^T 
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[0055] h 1 2 tt, z<Dm<D%2<DmBmmm 

i 3~ii 1 5U, hi 2mwircm&m%m>>ZT 
Atfti^T, wmn<nmm c*&gm> rum 

%rzt>xDm%z>o hi 3\z*t^iEffimmi±m3ic 

^^jEB5±fflatMiSU Hi 4t^t^jEB6±J!!a 10 
«H5fc^fTOK±©ffl£ft]SU HI SKaOTlE 

BK H3, H5, stfH8t^-rass€ma^x^ 
j*tmzm*%&\^ hi 2~hi sfca^rfiKaa 

[0 0 5 6] Sf\ gfllltl C*-F2ttBg^jHS 
Ei5«SBIE*ffV\ fflSfW[?»l^f£k: I C 
*- F 2 ?>§fffii 1 ^f>*7 U ft-te>y i/ a 

SffiEfcfcV>T I C #- F 2 LfeSTPS D , 20 
OfiSBBfc*VTI4 I C-*- F 2 Bffl«D«*4jjW* 

[0 0 5 7] S-f^fcKS^a 1 fr^ I C A- F 2 fc*f 

b7*/Vfx«BJ»^ft^t 0 I c*-K2Tttcn$ 

f\ I C#-F2ft©^y 2 6 8flfc3tS£ffi«fl«* 

fc-fe V 5> 3 Vlt^-tr >y is 3 >lt£$a$ 2 7 1 fCT£j£ 
U l^f§l©7W;^TBg^U SflilA 30 

r^-^y^aym^mz 7 1 (im^g^sjf£ 
i&mmzmu m\:^y^ 3 ymti^^nm^v 

jf^SHHWE tt-fe -y $/ a 85 ^K<, S 
bfea*ififfl-r5cl:t?tftv->o coftft, Hi©* 

>tt£§ffil 2 t I C *- F 2 6 -vmitLTcm^ 40 
EC M^S^LfcgfflSKiECM^I CA-K2 6t 

7yr;m*#T, cn%nti^affl^2 5btTS^ 

U 7X^7^7 2 7^«.*feO"e»5. ftfeEC 

iHSM 6 nr* 9 , c n^sn Lfc i c a- f 2 e 

Tii^ty 2 6 8 ftfcfEItU fittfcDfiSKKfcfc^T 

•fey a ymn^mitm^hr^i. 5 tilts fc©T* 

Sfea»t|BI)l-e*ofcS€a2AV^-s;3>7y 50 
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- F 2 "Ftt^y 2 6 8 ICSSf/UXilSPSof; 
[0 0 5 8] W*tf, S®H2C»^T, fflSHE (fe 

-7>'3y|i©ffl^bMa) as«^affigp2 5 at-11 
s*u x^^>^;i/»©a^Ms«a«^afigi32 5 
bT'Ma?n§ 0 xb, Hg^7;i/nyXA^iHii:^t 

It. 5«/ffi:ft^TWUf J; <, fflSHliE 

[0059] cct% mm^mmmm^mmz. 

■O^TZ ttb&o of 9, I C#-F2 6fC<fc9, £© 

1 C A- F 2 6 g«;*n;fc£M« 2 *«ftii©gfi 

[00 60] HI 2fc*f«fc5fc, IC*-F26H, 
•fev>3>'»4fiES2 7 1 ^ixll^„ e©-tr-7i/3 
>8ME2 7 Ifc±5£j££ft3-fe*y5'3 
Bf^g|32 6 9tXA*n5o r>w****y 2 

6 7tfBii?nTv^«sa![©T^>fxa©3-5, m© 

ti\ ai§#a52 6 9fe:A*sn5. set, ecm^^ 
y 2 6 8c«»^nrcE CMfc^sna^^^y^m 

*\ HBt^2 6 9fcA*^n^ 0 
[0 0 6 1] »|gp2 6 9ti, rVwx®tj;D-t:7 
~> 3 ym^mt U -tr>r>3 >stt ± D X ^7 5 

a^^t-rs. aprf^2 6 9tj;»)B^fl:snrc-fe 

2 7 0*^bTg^«2fcA**nS. §ffl«2!i, 1 
■^affigP 2 5 ©-gp# H 1 3 tC^1-a«#a€SP 2 5 a 

^■r»i^afflgp2 5 bicffl^t-« 0 
[0062] Hfi^aflgP2 5tt, rvwxii^ty 2 

•>3«ft§„ 2 «a^nsa52 5tt, « 
nfe-t >y * 3 >a t j: d nrc x ^ 7 y 7^ 

72 7tt« a 7*^9^9 2 7 a, e^&snfe 
x ^ 7 > 7;HIC J:9a^©X^^> 7;l/%)BI»f § . 
[0 0 6 3] *IC x Hi 4^#MLT, HI 

aflrr*^v"fe-s^wuaaftB8»r«. hi 4h, s 

H 1 4 fcjSf»§a 2 fttf I C A- F 2 6 ©S*M 
f±, Hi 2t3^rSiffll2RtfI CA-F2 6 tmtT' 
flU Hi 4Ca?T < J:5fc:x c©gna2tctt. 



(12) 
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mm l < mpm^mm 3 1 mm$m%> 3 

[0 0 6 4] ^&Sfl«©#£??}£Ji, H2T^Lfc 
T3HIT52f& 3) TfKmLfc 

[0 0 6 5] Hi 4 fctt^T, 8£Hlfr5TO5ffi* 

2t«t!)S#S+U I C*-K2 6fciHfc£nSo ic 
*-F2 6tt, ECKMt'J 2 6 8KJ:n?»1tS«Ktt 
fS„ I CA-F2 6B, *&t^nT^3r;WX 

[0 0 6 6] H 1 4 ©WT*ltr/W*ttKH= 3©§fl 
1 2 tmW.-£ftfc I C ft- F 2 6 tt, SMS#i©T^ 
-fXil^iJ^ECM^ ; eU 2 6 8tf2'»LTfeD, EC 20 
NMt'J 2 6 8£KHLTV^-y-fe-^©#-5f£g{l 

[oo6 7] ?t y ^-s;o#9(oafti*a«-fea«i2 

■b-^lffS*ii^L<ii^Mi^<D^gP3 l fcJ; 

vTvmmmtzrcsbmmmmmu mm® 

[0 0 6 8] MifrDfflm ^&§€«£*fLT, fl» 

feo hi 5£#,itT, HH§iis©*± oe^fb 

[0 0 6 9] M 1 ©Mffl t LT8*S»flM£»L 
T, (1) H8*§3HI£St±U *Bfcy-yb-3?*«w 

****fcife£r*»a, (2) pf^an^iuhu ;* 

y*-^%g*L*VvKeJt3£T5»^ (3) Bf^ffi 50 
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^ (4) %wmmm±&t, *-y*-&t>mhis: 

[0 0 7 0] H 1 5 &, jiflji 1 ^5SHi*tiSiR3IJ6 
££ffiT5£ffla2&tf I C %- F 2 6 <DHH**?M 
TfftS. C©Hl 5fc^-rSfil2Rtf I CA-K2 6 
©lfc*«i, HI 4£**3li«2&tf I C*-K2 

6^i:-?&&o m&<Diz. hi 5t^ri c*-k 

26«, E C * U 2 6 8 F*3EBt^§Sfl©glL©Wl!S 

%/T?risffi. Rtf ^ y t-vmnrnzm mv>- 

CMO-gtfhLTI C*-F2 6tA*5tl5« 

[0 0 7 1] MAtf % HI 5©$im E CM^tU 2 
6 8E, *7-fc-5>Sas=W!k Bf^ffl{fglfc=«U 
r'V*«Hg!l= 3 ©a#«E*f LT* >y fc-i/*##= 

i c*-F2 6a§#i2{c^tLT, un^'tta^ 

5>#3= 3 y*-$>SttaSffW»5*Hi U Bftfe 

&mm$3 2 ETT V«#fc£fif*. 
[0 0 7 2] £©Hl 5©$im ><7-b—>m=W 

[0 0 7 3] c©<fc5t, SfiSUffl^S^y-fc-^S^It 

st^^iMStifBB^^n^nssi- * c t c <fc 5 s ^ 

T?t§ 0 I 

[0 0 7 4] ±KffilUrc«2©Hfflgg«lE«« 

■e sa %mmm^imw&mm\mmm 

T?fe5„ oft), ®l©HJBKim I CA-F^Tf 

r> x«c «t 5 x ^ 7 ^ ?mmmt£ tu i c * 
^7>7;iHfte^s^tsn5 0 cntc»LT. ^2©^ 

I CA-FrtTr;WX»cJ:t)t-r>3 
7;V8W§ffc£tu I C*-F36»5SflWfc»bTl|f 



(13) 
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fe-fe v v 3 >mWHtttu -fey * a y»c «t t) Rg^ 
[0 0 7 5] ttT, ±BRiHLfcc©^©flUfflt^ic 
[0 0 7 6] (1) ft&Hfltfl CA-Ht#U *IE 

§c of n i ©naggsim *jE#fra*ftT> 

SSfiittftLT, I C*-F&Bg^b2nfc7.^> 

[0 0 7 7] (2) a^iOtf I CA-FtMLT^ 

[0 0 7 8] (3) ftmEMfo *EWTfeftT>*§ 
ffiih I C£-F^©^Ifi£il$iJL£^ *Etffr 

EWxfcftTl'' § gfitSfcft L T * y ■fe-i^W'li 

■fey* 3 >a&lfB^t«tirc^i'7^;u»fi!)3IM* 
MM Lfc <9 , *jEtf?rfeftT^33<I»fcft LT^ >y-fe 
-^tfJ*#J»1*fH«ai* LT* y ■fe-S?*«^S«fc 9 30 

[0 0 7 9] mmiMBMKmfez 
mu^^<^fr<DmfmmmmnT<t>, mm 40 

[00 8 0] 

[0ffi©fB«M 50 
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[a 1 1 cosmos 1 ©immwsskmmmji 
[02] 0 1 t^fffi^SMMav'T.xAtcgffi^n?. 

1 c f t <D^smmmittttjEm±mw<Dm 1 
[H3] 0 1 i^tmgmm^zTLKmmftz 

&fflK&Xf 1 C KOftfTOBfcffiJEtSfcftHTfc 
t), «Flc, #£ia©§ftSIB/8t£2-?VFK:LT 

[04] 0 1 t^-rafiass^aa^Ticiiffl^ns 

ta©gfflgP£tt£#-^FfcLTI c*-Fi:o 
BMffifc&itf 5*EffiiM©!S 1 MRtfS 2 M£ 

[05] hi t^-r&jM§wi^xri,taffl$n-§ 

I C A- K©i!ifMi£ffiJgTSfc»0-e;fc 
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SPECIFICATION <EXCERPT> 

[0054] Next, the second embodiment according to the present 
invention is described with reference to the drawings. This second 
embodiment is an application of the first embodiment as described 
above. Therefore, the same descriptions as in the first embodiment 
are not repeated. 

[0055] FIG. 12 is a base block diagram of the 
broadcast-reception processing system according to the second 
embodiment of the present invention. FIG. 13 to FIG. 15 illustrates 
an anti-abuse process of preventing a computer abuse only for a 
specific type of the receiver (malicious receiver) in the 
broadcast-reception processing system as described in FIG. 12. 
The anti-abuse process shown in FIG. 13 corresponds to the one 
shown in FIG. 3, the anti-abuse process shown in FIG. 14 
corresponds to the one shown in FIG. 5, the anti-abuse process 
shown in FIG. 15 corresponds to the one shown in FIG. 8. The 
following describes the broadcast-reception processing systems 
shown in FIG. 12 to FIG. 15, in particular, differences from the ones 
shown in FIG. 1, FIG. 3, FIG. 5, and FIG. 8. 

[0056] Initially, the receiver 1 and the IC card 2 authenticate 
each other using cryptographic communication. When the mutual 
authentication succeeds, a temporary session key is provided from 
the IC card 2 to the receiver 1. This temporary session key is 
generated by the IC card 2 for the current mutual authentication, 
and another key is generated by the IC card 2 for the next mutual 
authentication. 

[0057] First, the receiver 1 provides a device-key 
identification number to the IC card 2. In the case where the IC 
card 2 has received the ECM without the device-key identification 



number indicating that the receiver is malicious so that the memory 
268 in the IC card 2 contains no information indicating that the 
receiver is malicious, the IC card 2 i) generates the temporary 
session key in the session key generating unit 271, ii) encrypts the 
generated session key using the device key of the receiver, and iii) 
passes the encrypted session key to the receiver 1. It is noted that 
the session-key generating unit 271 uses a cryptography processing 
unit, a random number generator, and the like to avoid generating 
the identical session key. In this manner, the session key is passed 
only to the receiver having the correct device key because the 
session key is encrypted using the device key. Moreover, the 
previous session key cannot be used again because the session key 
changes for each mutual authentication. Thus, as described in the 
first embodiment, this system has higher security than the system 
where the scramble key is encrypted using the device key. The 
receiver 2 shares the session key with the IC card 26. Then, upon 
receiving ECM, the receiver 1 provides the received ECM to the IC 
card 26. In response to this, the receiver 1 obtains the scramble 
key encrypted with the session key. Then, this key is decrypted in 
the key decrypting communication unit 25b, and the decrypted key 
is provided to the descrambling unit 27. It is noted that device key 
identification indicating the malicious device is appropriately 
transmitted to the ECM from the broadcasting station. Thus, upon 
receiving this identification, the IC card 26 stores the received 
identification in the memory 268 and, from the next mutual 
authentication, the cryptographic communication using the stored 
device key identification is not performed so as to prevent the 
session key from being shared. On the contrast, when the troubled 
receiver 2 does not need to be restricted anymore due to an upgrade 
or the like, the broadcasting side transmits the device key 
identification of the receiver to be derestricted, and the IC card 2 
deletes this identification from the memory 268 in the case where 
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the memory 268 stores this device key identification. 
[0058] For example, in the receiver 2, the mutual 
authentication (decrypting process for the session key) is performed 
in the key decrypting communication unit 25a, and the scramble key 
is decrypted in the key decrypting communication unit 25b. 
Alternatively, when using the same algorithm, the decrypting 
process may be commoditized for the session key and the scramble 
key as long as the decrypting process has the structure where one 
key is changed over the other key. 

[0059] The following summarizes the key coding process and 
the key decrypting process. In particular, the following sections 
summarize a process after finding from the IC card 26 that the 
receiver 2 into which this IC card 26 is inserted does not match any 
of the receivers to be eliminated. 

[0060] As shown in FIG. 12, the IC card 26 includes the 
session key generating unit 271. The session key generated from 
this session-key generating unit 271 is provided to the key 
encrypting unit 269. In addition, the key encrypting unit 269 
receives the device key identical to the device key stored in the 
target receiver 2 among the multiple device keys stored in the 
device key memory 267. The key encrypting unit 269 also receives 
the scramble key contained in the ECM stored in the ECM memory 
268. 

[0061] The key encrypting unit 269 encrypts the session key 
using the device key, and encrypts the scramble key using the 
session key. The session and scramble keys encrypted by the key 
encrypting unit 269 are provided to the receiver 2 via the 
communication unit 270. The receiver 2 receives the encrypted 
session key and the encrypted scramble key via the key decrypting 
communication unit 25. It is noted that part of the key decrypting 
communication unit 25 corresponds to the key decrypting 
communication unit 25a as shown in FIG. 13, part of the key 
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decrypting communication unit 25 corresponds to the key 
decrypting communication unit 25b as shown in FIG. 13 as well. 
[0062] The key decrypting communication unit 25 decrypts 
the encrypted session key using the device key provided from the 
device key memory 24. The key decrypting communication unit 25 
also decrypts the encrypted scramble key using the decrypted 
session key, and then provides the decrypted scramble key to the 
descrambling unit 27. The descrambling unit 27 descrambles the 
broadcasting data using the provided scramble key. 
[0063] With reference to FIG. 14, the next section describes a 
message notifying process of notifying the message only for the 
specific type of the receiver (malicious receiver) in the 
broadcast-reception processing system as illustrated in FIG 12. 
FIG. 14 illustrates a schematic block diagram for the receiver 2 and 
the IC card 26. The base structure of the receiver 2 and the IC card 
26 shown in FIG. 14 is the same as the one shown in FIG. 12. 
However, as shown in FIG. 14, a data-to-image-or-audio-signal 
converter 31 and a multiplexer 32 are added to this receiver 2. 
[0064] It is assumed that, as the method for identifying the 
malicious receiver, this system employs a method of multiplexing, 
into the ECM, a device-key identification table indicating whether or 
not the receiver is malicious, or a method of multiplexing only the 
device key identification of the malicious receiver into the ECM, as 
described in FIG. 3 (or FIG. 13). 

[0065] In FIG. 14, the broadcast side transmits the 
information on the device key identification to identify the malicious 
receiver and the information indicating a message number to be 
displayed on the receiver having the device key identification. The 
receiver 2 receives the above information and then provides it to the 
IC card 26. The IC card 26 stores the provided information in the 
ECM memory 268. The IC card 26 also notifies, of the message 
output-control information, the receiver having the device key 
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indicated as a malicious receiver by the device key identification. 
The message output-control information is the message number for 
example. 

[0066] In the example of FIG. 14, the IC card 26 connected to 
the receiver 2 with device key identification = 3 stores the device 
key identification of the receiver 2 in the ECM memory 268, and then 
notifies the receiver of the message number stored in the ECM 
memory 268 to request a display of the message number. 
[0067] Upon notifying of the message number, the receiver 2 
causes the demultiplexing unit 23 to demultiplexe the ECM to obtain 
the message for the requested message number. This data is, for 
example, character data for displaying the message. The obtained 
message information is converted into the image signal to display on 
TV by the data-to-image-or-audio-signal converter 31, and the 
multiplexing process for a on-screen display is performed by the 
multiplexer 32. It is noted that the on-screen display of the 
character is described here as an example, however, a voice or an 
image may be used. The point is that the broadcasting station can 
specify the message to be displayed for the specific type of the 
receiver. In this manner, each of the receiver can receive a 
different message such as "repairing is required" or "inform the 
owner of the contact information", and thereby the owner can know 
the message. The above-mentioned message which is placed on 
the service information of the digital broadcasting for example can 
be transmitted. 

[0068] In the above example, for the malicious receiver, the 
broadcasting station specifies to prohibit the cryptographic 
communication and stop providing of the scramble key or to have 
the receiver display the message. With reference to FIG. 15, the 
next section describes another example where the broadcasting 
station can selectively specify to prohibit the cryptographic 
communication (non-transmission of the encrypted session key and 
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the encrypted scramble key) and to display the message 
(transmission of the message output-control information). 
[0069] The broadcasting station 1 acts on the malicious 
receiver as follows: i) specify to prohibit the cryptographic 
communication and to display the message, ii) specify to prohibit 
the cryptographic communication and not to display the message, 
iii) specify not to prohibit the cryptographic communication and to 
display the message, and iv) specify not to prohibit the 
cryptographic communication and not to display the message. 
[0070] FIG. 15 is a diagram illustrating an example of the 
receiver 2 and the IC card 26 which receive the broadcast wave 
transmitted from the broadcasting station 1. The base structure of 
the receiver 2 and the IC card 26 shown in FIG. 15 is the same as the 
one shown in FIG. 14. They are different in that the IC card 26 
shown in FIG. 15 stores two pieces of information, i.e. the 
information indicating whether or not the cryptographic 
communication is prohibited and the information indicating whether 
or not the message is displayed. These two pieces of information 
are inputted into the IC card 26 as a part of the ECM. For the 
malicious receiver, the cryptographic communication and the display 
instructions are controlled based on the two pieces of information. 
[0071] For example, in FIG. 15, the ECM memory 268 stores i) 
message display = applicable, ii) cryptographic-communication 
prohibition = not applicable, and iii) displaying the message of 
message number = 3 for the receiver having device key 
identification = 3. More specifically, the IC card 26 transmits the 
above information to the receiver 2, and upon receiving the 
information, the receiver 2 demultiplexes the broadcast signal to 
obtain the message of message number = 3. Then, the on-screen 
display for the obtained message is generated by the 
data-to-image-or-audio signal converter 31, and the generated 
on-screen display data is multiplexed into the TV signal by the 
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multiplexer 32. 

[0072] The example of FIG. 15 is under the condition of 
message display = applicable and cryptographic communication 
prohibition = not applicable, and thus the message such as "this 
receiver is assigned to the malicious receiver" or "need to contact 
the service center" is displayed. However, it is possible for a 
subscriber to view the scrambled broadcasting because the 
cryptographic communication is not prohibited. Under the 
condition of message display = applicable and 
cryptographic-communication prohibition = applicable, the message 
can be displayed, and the cryptographic communication can be 
prohibited to disable the viewing of the scrambled broadcasting as 
well. 

[0073] In this manner, the anti-abuse process for the 
malicious receiver is made more flexible by setting each of the 
message-display information and the cryptographic-communication 
prohibition information from the broadcast side. 
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1: Broadcasting station 
2: Receiver 
3: Satellite 

11: Viewer information memory (such as ID, key Km) 

12: Viewer management unit 

13: Modem 

14: Scramblering unit 

15: ECM generating and encrypting unit 

16: EMM generating and encrypting unit 

17: Multiplexing unit 

22: Station selector 

23: Demultiplexing unit 

24: Device key memory 

25: Key decrypting communication unit 

26: IC card 

27: Descrambling unit 
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28: Modem 

29: MPEG decoder 

33: Communication unit 

210: System controller 

261: ECM decrypting unit 

262: EMM decrypting unit 

263: Kmi memory 

264: EMM memory 

265: Viewing determination unit 

266: Viewing information memory 

267: Device key memory 

268: ECM memory 

269: Key encrypting unit 

270: Communication unit 

271: Session generating unit 

a, c: TV signal 

b: Phone line 

d, e: Scramble key Ks 

f: Key Kw 

g: Key Kmi 

FIG. 13 
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2: Receiver 

22: Station selector 

23: Demultiplexing unit 

24: Device key, Device key identification = 3 

25a, 25b: Key decrypting communication unit 

26: IC card 

27: Descrambling unit 

29: MPEG decoder 

267: Device keys 1 to 8 

268: Device key identification = 3 

271: Session generating unit 

a: Input 

c: Scramble key Ks 
d: Session key 

e: Not return the session key to the malicious device 
f: Output 

g: Device key identification = 3 
h: Encrypted session key 
i: Encrypted scramble key Ks 
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FIG. 14 
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2: Receiver 

22: Station selector 

23: Demultiplexing unit 

24: Device key, Device key identification = 3 

25a, 25b: Key decrypting communication unit 

26: IC card 

27: Descrambling unit 

29: MPEG decoder 

31: Data-to-image-or-audio-signal converter 

32: Multiplexer 

267: Device keys 1 to 8 

268: Device key identification = 3, Message number = 3 

271: Session generating unit 

a: Scramble key Ks 

b: Message of message number = 3 

c: Session key 

d: Output 

e: Device key identification = 3 



f: Encrypted session key 

g: Encrypted scramble key Ks 

h: Return the message number to the malicious device 
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2: Receiver 

22: Station selector 

23: Demultiplexing unit 

24: Device key, Device key identification = 3 

25a, 25b: Key decrypting communication unit 

26: IC card 

27: Descrambling unit 

29: MPEG decoder 

31: Data-to-image-or-audio-signal converter 

32: Multiplexer 

267: Device keys 1 to 8 

268: Device key identification = 3, Message number = 3 

268: Message display = applicable, Cryptographic-communication 
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prohibition = not applicable 

271: Session generating unit 

a: Message of message number = 3 

b: Scramble key Ks 

c: Session key 

d: Output 

e: As a part of the ECM, i) malicious device (key) information, ii) 

information indicating whether or not the cryptographic 

communication is prohibited, and iii) information indicating whether 

or not the message is displayed 

f: Device key identification = 3 

g: Encrypted session key 

h: Encrypted scramble key Ks 

i: Return the message number to the malicious device 
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